Interface language
As safe as the parts it controls, and no safer. Each device is a real Android phone in a datacenter in Vietnam, rented to one person at a time and factory reset after every rental; the stream uses WebRTC, which encrypts media in transit. It cannot protect your game account from a leaked password, a phishing link or the publisher's rules — those stay with you.
You rent a real Android phone with an ARM chip in a datacenter in Vietnam — not a virtual machine, and not a business "cloud phone system" for making calls. It is rented to one person at a time; games and apps run on it, while your own phone only shows the screen and sends your input.
what an Android cloud phone isIn the pool
The phone sits in the pool after it has been wiped. Only phones in this state can be rented.
Rented
During your rental the phone is not rented to anyone else at the same time. The apps, accounts and files you put on it stay there until the rental ends.
Cleaning
When the rental ends, the phone factory resets itself — a real Android reset, not a cleanup script. Signed-in accounts, installed apps and files are all erased.
Reset didn't finish? The phone notices on its next boot and runs it again.
Check
Only when the phone itself reports that the wipe is complete does the system put it back in the pool for the next renter.
It works the other way too: when your rental ends, your data on the phone is gone for good and cannot be recovered. To keep the phone, extend while the session is still running.
Your browser connects straight to the rented phone: video and sound travel from the phone to you, and your taps and typing travel back. The stream uses WebRTC, which encrypts media in transit as part of the protocol.
Signing in and setting up the session go through our session server, over TLS.
Video and sound travel directly between the rented phone and your browser; no media server sits in the middle of your stream.
The stream uses WebRTC, which encrypts media in transit as part of the protocol.
If your network blocks a direct connection, a relay forwards the encrypted traffic without decrypting it.
This is not end-to-end encryption in the messaging-app sense: the phone at the far end is hardware we operate. We don't publish a cipher name either, because your browser and the phone agree on it when they connect.
Five channels; the two worth the most thought are clipboard and file transfer — they only run when you press them, but whatever you paste or send ends up on the rented phone. Your microphone and camera are not sent.
| Channel | Direction | When it runs | Keep in mind |
|---|---|---|---|
| Video and sound | DirectionFrom the phone to you | When it runsWhile the phone is open in your browser | Keep in mindEverything on the rented phone's screen — messages, verification codes — shows on the screen you are watching, shared computers included. |
| Taps, swipes and typing | DirectionFrom you to the phone | When it runsWhile you use it | Keep in mindWhat you type goes straight into the app open on the rented phone, just like typing on a phone in your hand. |
| Clipboard | DirectionBoth ways | When it runsOnly when you press get or paste | Keep in mindPasting a password or a one-time code puts it on the rented phone. |
| Files and screenshots | DirectionBoth ways | When it runsOnly when you send or save one | Keep in mindA file you send stays on the rented phone until the rental ends and the phone is reset. |
| Your microphone and camera | DirectionNot sent | When it runsNot sent | Keep in mindThe viewer does not ask your browser for microphone or camera access. The phone's virtual camera, where your plan includes it, only plays a clip you choose. |
The clipboard does not sync in the background: the rented phone only sends its clipboard when you press get, and only receives what you press paste on.
The three places people worry about most when handing details to a new service, and what we hold at each one.
You sign in with your Google account; we never ask you to create a password with us, so there is no XCloudPhone password of yours to leak or be stolen.
You top up a wallet by VietQR bank transfer or by card through Stripe. We don't store your card details: every top-up is a separate payment through Stripe.
If you use a proxy, it is your own: you enter it in the dashboard and the system stores it to assign to the phone. We do not sell or provide proxies.
A cloud phone moves where Android runs; it does not change what happens on Android. These seven risks stay with you or with the game publisher — nothing on our side removes them, and the empty XCloudPhone column is deliberate.
| Risk | XCloudPhone | You | Game publisher |
|---|---|---|---|
| A phishing link or fake app you open on the rented phoneThe rented phone is a real Android phone with a real browser and Google Play. A malicious link or an unknown APK runs there like on any phone, and can reach the accounts you are signed into. | XCloudPhone: Can't prevent | You: Can prevent | Game publisher: Can't prevent |
| A game password you have shared or reusedIf a friend, someone playing on your behalf or another website already has your password, a cloud phone cannot take it back. | XCloudPhone: Can't prevent | You: Can prevent | Game publisher: Can't prevent |
| What you paste or send into the rented phoneClipboard and file transfer do exactly what they say: whatever you move onto the rented phone stays on it until the rental ends. | XCloudPhone: Can't prevent | You: Can prevent | Game publisher: Can't prevent |
| Share links you createA share link grants view or control access to the phone; anyone holding a live link can get in, even if the link was forwarded. Turn it off when you no longer need it. | XCloudPhone: Can't prevent | You: Can prevent | Game publisher: Can't prevent |
| The game publisher's rules and decisionsPublishers decide what they allow and whether to lock an account. That depends on the game and how you play; we cannot guarantee it. | XCloudPhone: Can't prevent | You: Helps prevent | Game publisher: Can prevent |
| The proxy you choose and its seller's termsWhich proxy you pick, where you buy it and its terms are between you and the provider; the system only assigns it to the phone as you configured it. | XCloudPhone: Can't prevent | You: Can prevent | Game publisher: Can't prevent |
| Banking and e-wallet apps on a phone that isn't yoursNothing on our side makes that a safe idea. Don't sign in to banking or e-wallet apps on a rented phone. | XCloudPhone: Can't prevent | You: Can prevent | Game publisher: Can't prevent |
This table is not a disclaimer: it is the real line of responsibility when you use a phone that sits somewhere else.
The rented phone is real hardware, so games see the signals of a real device rather than an emulator, which generally means better compatibility. Whether an account gets locked depends on the game and how you play; we cannot guarantee it.
The game runs on a real ARM phone, not a virtual machine — that is about compatibility; whether an account gets locked, we cannot guarantee it.
The phone is reset when the rental ends; tie your progress to your game account so you can sign back in on another phone.
The game keeps running when you switch your phone off, to the end of the rental period you paid for — but that does not mean the publisher allows every kind of idle play.
Every limit on this page also applies when you leave a game running day and night.
leaving a game running 24/7 on a cloud phoneEight steps, each one thing to do and why it matters. They target the risks that the architecture on our side cannot cover.
0 of 8 done
This is the short version to act on now; it does not replace good security habits for all of your accounts.
Five real ones, compared with using your own phone.
The phone is far away; a weak or patchy connection means a stuttering picture and delayed input, and no hardware on our side can fix your Wi-Fi.
The reset that protects you from the previous renter applies to you too: when the rental ends your data on the phone is gone, unless you extend while the session is still running.
There is no grace period; to keep the phone, extend before time runs out, or turn on auto-extend.
A rented phone has no SIM and cannot make calls; it is a second Android phone you rent when you need one.
Some apps and games run their own device checks and may not work on a rented phone; some messaging apps are blocked under our terms of service.
As safe as the parts the service controls: a real phone reset between renters, a stream encrypted in transit, and Google sign-in so no password of yours is held here. The risks that remain are the ones you bring to the phone — see the table of limits above.
No. A business "cloud phone system" is a VoIP service for making calls over the internet. A cloud phone here is a real Android phone you rent and control from a browser, so the security questions are about the device and what you put on it.
Yes, in transit. The stream uses WebRTC, which encrypts media in transit as part of the protocol, and it runs directly between your browser and the phone. It is not end-to-end encryption in the messaging-app sense.
Yes. Every phone is factory reset when the previous rental ends and only returns to the pool once the phone itself confirms the wipe finished.
That depends on the game and how you play; we cannot guarantee it. A real ARM phone shows the game real device signals instead of an emulator's — that is about compatibility, not a promise about account locks.
Card payments are processed by Stripe, and we don't store your card details: every top-up is a separate payment. You can also top up by VietQR bank transfer.
No. The viewer does not ask your browser for microphone or camera access, so your microphone and camera are not sent to the rented phone.
Sign-up requires a Google account; top-ups go through VietQR or a card; and our terms of service prohibit spreading malware, mass spam, cryptocurrency mining and cheating tools, and block some messaging apps on every phone. No rule stops every bad actor, but these are the ones in force.
Yes. Sign in with Google and a new account gets 2 trial hours, no card needed — enough to see the phone and your connection before you rent.
Sign in with Google for 2 trial hours, no card needed. Follow the checklist, try your game, then decide whether to rent.
